This listing of claims will replace all prior versions, and listings, of claims in the application: 



Listing of Claims: 

1. (currently amended) A method of monitoring a registry comprising: 
requesting a handle for a registry key to a calling process; 

requesting a registry key value for the handle; and 

obtaining security clearance to complete the requests, wherein at least one security 
clearance parameter has an adjustable threshold, said threshold being is updat e d adjustable by a 
system command in association with one or more of the requests. , 

2. (original) The method of claim 1 further comprising after requesting a handle for 
a registry key to a calling process: 

determining a process ID and registry key; 

determining whether the process is secured by checking a secured process list; 

if the process is secured, determining whether the registry key is on a rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key; 

and 

if the process is not on the secured list or if the registry key name is not on the rejection 
list, completing the request. 

3. (currently amended) The method of claim 1 further comprising after requesting a 
registry key value for the handle: 

determining a process ID and registry key value; 
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determining whether the process is secured by checking the a secured process list; 

if the process is secured, determining whether the registry key is on the rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key 

value; 

if the process is not on the secured list, completing the request; 

if the registry key is not on the rejection list and the process is on the secured process list, 
processing the value request and determining whether the value is on the rejection list; 
if the value is not on the rejection list allowing the request to be completed; and 
if the value is on the rejection list denying access to the registry key value. 

4. (currently amended) The method of claim 1 further comprising after modifying 
and deleting handles and values: 

determining a process ID; 

determining whether the process is secured by checking whether the process is on the a 
secured process list; 

if the process is not on the secured process list, completing the request; and 

if the process is on the secured process list, not allowing the request to be completed. 

5. (currently amended) A registry monitoring system wherein the registry is 
monitored by a method comprising: 

requesting a handle for a registry key to a calling process; 
requesting a registry key value for the handle; and 
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obtaining security clearance to complete the requests, wherein at least one security 
clearance permission has an adjustable threshold and wherein said threshold is reestablished in 
association with one or more of the requests. 

6. (original) The registry monitoring system of claim 5 further comprising after 
requesting a handle for a registry key to a calling process: 

determining a process ID and registry key; 

determining whether the process is secured by checking a secured process list; 

if the process is secured, determining whether the registry key is on a rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key; 

and 

if the process is not on the secured list or if the registry key name is not on the rejection 
list, completing the request. 

7. (currently amended) The registry monitoring system of claim 5 further 
comprising after requesting a registry key value for the handle: 

determining a process ID and registry key value; 

determining whether the process is secured by checking the a secured process list; 

if the process is secured, determining whether the registry key is on the rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key 

value; 

if the process is not on the secured list, completing the request; 
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if the registry key is not on the rejection list and the process is on the secured process list, 
processing the value request and determining whether the value is on the rejection list; 
if the value is not on the rejection Ust allowing the request to be completed; and 
if the value is on the rejection list denying access to the registry key value. 

8. (currently amended) The registry monitoring system of claim 5 further 
comprising after modifying and deleting handles and values: 

determining a process ID; 

determining whether the process is secured by checking whether the process is on the a 
secured process list; 

if the process is not on the secured process list, completing the request; and 

if the process is on the secured process list, not allowing the request to be completed. 

9. (currently amended) A computer configured to monitor a registry according to a 
method comprising: 

requesting a handle for a registry key to a calling process; 

requesting a registry key value for the handle; 

obtaining security clearance to complete the requests; and 

updating adjusting a threshold of at least one security clearance parameter , said threshold 
being adjustable in association with one or more of the requests. 

10. (original) The computer of claim 9 further comprising after requesting a handle 
for a registry key to a calling process: 
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determining a process ID and registry key; 

determining whether the process is secured by checking a secured process list; 

if the process is secured, determining whether the registry key is on a rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key; 

and 

if the process is not on the secured list or if the registry key name is not on the rejection 
list, completing the request. 

11. (currently amended) The computer of claim 9 further comprising after requesting 
a registry key value for the handle: 

determining a process ID and registry key value; 

determining whether the process is secured by checking the a secured process list; 

if the process is secured, determining whether the registry key is on the rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key 

value; 

if the process is not on the secured list, completing the request; 

if the registry key is not on the rejection list and the process is on the secured process list, 
processing the value request and determining whether the value is on the rejection list; 
if the value is not on the rejection list allowing the request to be completed; and 
if the value is on the rejection list denying access to the registry key value. 

12. (cunently amended) The computer of claim 9 further comprising after modifying 
and deleting handles and values: 
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determining a process ID; 

determining whether the process is secured by checking whether the process is on the a 
secured process list; 

if the process is not on the secured process list, completing the request; and 

if the process is on the secured process list, not allowing the request to be completed, 

13. (currently amended) A machine-readable medium comprising a program to 
monitor a registry according to a method comprising: 

requesting a handle for a registry key to a calling process; 

requesting a registry key value for the handle; 

obtaining security clearance to complete the requests; and 

updating adjusting a threshold of at least one security clearance permission , said 
threshold being adjustable in association with one or more of the requests . 

14. (original) The machine-readable medium of claim 13 further comprising after 
requesting a handle for a registry key to a calling process: 

determining a process ID and registry key; 

determining whether the process is secured by checking a secured process list; 

if the process is secured, determining whether the registry key is on a rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key; 

and 

if the process is not on the secured list or if the registry key name is not on the rejection 
list, completing the request. 
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15. (currently amended) The machine -readable medium of claim 13 further 
comprising after requesting a registry key value for the handle: 

determining a process ID and registry key value; 

determining whether the process is secured by checking the a secured process list; 

if the process is secured, determining whether the registry key is on the rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key 

value; 

if the process is not on the secured list, completing the request; 

if the registry key is not on the rejection list and the process is on the secured process list, 
processing the value request and determining whether the value is on the rejection list; 
if the value is not on the rejection list allowing the request to be completed; and 
if the value is on the rejection list denying access to the registry key value. 

16. (currently amended) The machine-readable medium of claim 13 further 
comprising after modifying and deleting handles and values: 

determining a process ID; 

determining whether the process is secured by checking whether the process is on the a 
secured process list; 

if the process is not on the secured process list, completing the request; and 

if the process is on the secured process list, not allowing the request to be completed. 
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17. (currently amended) A computer implemented secured data transmission system 
having a receiver to access secured file content provided by a sender, wherein the receiver 
includes a registry monitoring system wherein the registry is monitored by a method comprising: 

requesting a handle for a registry key to a calHng process; 
requesting a registry key value for the handle; and 

obtaining security clearance to complete the requests, wherein a threshold of at least one 
security clearance parameter is updat e d adjustable via a system command in association with one 
or more of the requests. 

18. (original) The computer implemented secured data transmission system of claim 
17 further comprising after requesting a handle for a registry key to a calling process: 

determining a process ID and registry key; 

determining whether the process is secured by checking a secured process list; 

if the process is secured, determining whether the registry key is on a rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key; 

and 

if the process is not on the secured list or if the registry key name is not on the rejection 
list, completing the request. 

19. (currently amended) The computer implemented secured data transmission 
system of claim 17 further comprising after requesting a registry key value for the handle: 

determining a process ID and registry key value; 

determining whether the process is secured by checking the a secured process list; 
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if the process is secured, determining whether the registry key is on the rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key 

value; 

if the process is not on the secured list, completing the request; 

if the registry key is not on the rejection list and the process is on the secured process list, 
processing the value request and determining whether the value is on the rejection list; 
if the value is not on the rejection list alloying the request to be completed; and 
if the value is on the rejection list denying access to the registry key value. 

20. (currently amended) The computer implemented secured data transmission 
system of claim 17 further comprising after modifying and deleting handles and values: 

determining a process ID; 

determining whether the process is secured by checking whether the process is on the a 
secured process list; 

if the process is not on the secured process list, completing the request; and 

if the process is on the secured process list, not allowing the request to be completed. 

21. (currently amended) A registry monitoring system comprising: 
at least one machine-readable medium for: 

receiving a handle request for a registry key to a calling process; receiving a registry key 
value request for the handle; granting security clearance to complete the requests; and updating 
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adjusting a threshold of at least one security clearance permission by a system command , said 
threshold being adjustable in association with one or more of the requests , 

22. (previously entered) The registry monitoring system of claim 21, further 
comprising denying security clearance when at least one security clearance permission is 
satisfied. 

23. (previously entered) The registry monitoring system of claim 21, wherein said at 
least one security clearance permission is associated wdth the elapsed time since said handle or 
registry key value has been previously requested. 

24. (previously entered) The registry monitoring system of claim 21, wherein said at 
least one security clearance permission is associated with the number of times said handle or 
registry key value has been previously requested. 

25. (previously entered) The registry monitoring system of claim 21, wherein said at 
least one security clearance permission is associated with the date in which said handle or 
registry key value was previously requested. 
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26. (previously entered) The registry monitoring system of claim 21, wherein said at 
least one security clearance permission is associated with the accumulated time said handle or 
registry key value has been previously accessed. 

27. (previously entered) The registry monitoring system of claim 26, wherein said 
previous access includes modifying and deleting keys and values of protected data locations. 

28. (previously entered) The registry monitoring system of claim 21, wherein said at 
least one machine-readable medium includes at least one device driver. 

29. (currently amended) A method of monitoring a registry comprising: 
receiving a handle request for a registry key to a calling process; 
receiving a registry key value request for the handle; 

granting security clearance to complete the requests; and 

updating adjusting a threshold of at least one security clearance parameter , said threshold 
being adjustable in association with one or more of the requests . 
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30. (previously entered) The method of claim 29, further comprising denying 
security clearance when at least one security clearance parameter is satisfied. 

3 1 . (previously entered) The method of claim 29, wherein said at least one security 
clearance parameter is associated with the elapsed time since said handle or registry key value 
has been previously requested. 

32. (previously entered) The method of claim 29, wherein said at least one security 
clearance parameter is associated with the number of times said handle or registry key value has 
been previously requested. 

33. (previously entered) The method of claim 29, wherein said at least one security 
clearance parameter is associated with the date in which said handle or registry key value was 
previously requested. 

34. (previously entered) The method of claim 29, wherein said at least one security 
clearance parameter is associated with the accumulated time said handle or registry key value has 
been previously accessed. 
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35. (previously entered) The method of claim 34, wherein said previous access 
includes modifying and deleting keys and values of protected data locations. 



-PHILl:3729000.vl 



14 



